Wink Hub

4 Articles

Wink Labs just announced that their home automation hub, the Wink Hub, is “transitioning to a $4.99 monthly subscription, starting on May 13, 2020.” Should you fail to pay the fiver every month, you will lose access to their app, voice control, and automations, which is everything it does as far as we can tell.

This is an especially bitter pill to swallow for Hub users, because the device was just that — a hub. It speaks Bluetooth, Z-Wave, ZigBee, WiFi, Kidde, and a couple other specific device protocols, interfaces with Amazon’s Alexa, has a handy Android master panel app, and had a nice “robot” system that made the automation side of “home automation” simple for normal people. In short, with its low one-time purchase price, compatibility with many devices, nice phone app, and multiple radios, it was a great centerpiece for a home-automation setup.

“Nice home automation system you’ve got there. Would be a shame if anything happened to it.”

As home automation grows more and more popular by the day, the free market is taking notice and working to supply the demand. The Wink Hub is a part of this current trend. It’s a device that allows many of your wireless devices to talk to one another. Things like lights, thermostats, door locks, garage doors…and many other devices can all connect to the hub. Typically, you use a program on your phone or tablet to control these devices. But because this is a closed source gadget, it can’t connect to everything, until now. A hacker was not only able to root the device, but he also gained the ability to connect to devices it was never designed to connect to.

[Michael] was able to get root and take control of some of the devices used with one of Wink’s main competitors – SmartThings. The process is not for the faint of heart and requires at least a yellow belt in Linux-Fu. [Michael] points out that you should use a Wink Hub that you don’t care about as the possibility of bricking it is there if something goes wrong.

We’ve seen a few instances of rooting the Wink and are happy to see these hacks maturing. It’s a shame the thing is locked down since the multiple radios make the hardware capable of being a great cross-platform hub. For legacy and better user experience, cross-platform operation is paramount. The industry isn’t moving in that direction… Phillips recently removed support for devices outside the Hue family. But the community wants this functionality and their push back led to a hasty reversal of Phillips’ changes. Hackers like [Michael] are showing what your home could be like if connected devices were free to interact with one another.

Spend enough time looking at home automation setups, and you’ll quickly find there are two competing philosophies. The first wants to put an Arduino on every light socket, with everything connected by cheap eBay radio modules. The second home automation philosophy requires astonishingly expensive hardware to talk to other expensive modules. The Arduino solution is a system that can be infinitely customizable, and the commercial solution talks to ‘the cloud’ for some strange reason. There is no middle ground. At least there wasn’t until [Eric] started poking around and looked at a few hardware solutions.

[Eric] was looking to control some GE Link bulbs through his phone, computer, or through the Internet. They’re supposed to be the best bulb on the market in terms of price and performance, but they can only be controlled with a Zigbee. This lead [Eric] to an interesting hack that gave all owners of the Wink Hub local control of their devices. From [Eric]’s research, this was the only way his lighting wasn’t dependent on ‘the cloud’.

Local control of the Wink was only possible after [Eric] read a post on rooting the Wink (and this post from a few days ago). Because the device could be rooted, and the fact that [Eric] already has a few things in his house integrated with OpenHAB, the choice on how to proceed with controlling a few Zigbee enabled lights was easy.

Once [Eric] got the light bulbs talking to the Wink, integrating them with the rest of the devices in his home was easy. The new bulbs are activated with his Arduino motion sensors, door sensors, and can be controlled via smartphone or by voice control. The Wink can also be completely disconnected from the Internet. A good idea, because the ability to turn a light on and off should not be dictated by the quality of your Internet connection.

Earlier methods of rooting the Wink involved passing commands via URLs – something that’s not exactly secure. The new method leverages what’s already installed on the Wink, specifically Dropbear, to generate public keys on the Wink hub and getting that key onto another computer securely. The complete exploit is just a few lines in a terminal, but once that’s done you’ll have a rooted Wink hub.

Even though the Wink hub has been rooted a few times before, we haven’t seen anything that leverages the capabilities of this hardware. There isn’t another device with a bunch of IoT radios on the market for $50, and we’re dying to see what people can come up with. If you’ve done something with your Wink, send it in on the tip line.